209.172.59.146(ngrBot hosted in Canada Toronto Iweb Technologies Inc)

Remote Host Port Number
209.172.59.146 5794 PASS ngrBot

213.251.170.52 80

74.53.197.4 80

NICK n{US|XPa}pvcbajf
USER pvcbajf 0 0 :pvcbajf
JOIN #butowski ngrBot
PRIVMSG #butowski :[DNS]: Blocked 0 domain(s) – Redirected 15 domain(s)

The data identified by the following URLs was then requested from the remote web server:
http://api.wipmania.com/
http://conectaamor.com/_server/editor/images/dominios.txt

EXE File:
http://conectaamor.com/_server/editor/images/fudnew2.exe

RFI SHELL:
http://conectaamor.com/_server/editor/images/lang.php find the passwd your self

Mailer:
http://conectaamor.com/_server/editor/images/mailer.php servez vous lol

hosting infos:
http://whois.domaintools.com/209.172.59.146

Categories: Uncategorized